Create aem-acs-common.yaml

misconfiguration/aem/aem-acs-common.yaml

@@ -0,0 +1,32 @@
+id: aem-acs-common
+
+info:
+  name: Adobe AEM ACS Common Exposure
+  author: dhiyaneshDk
+  severity: medium
+  reference:
+    - https://raw.githubusercontent.com/danielmiessler/SecLists/master/Discovery/Web-Content/aem2.txt
+  metadata:
+    shodan-query:
+      - http.title:"AEM Sign In"
+      - http.component:"Adobe Experience Manager"
+  tags: misconfig,aem,adobe
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/etc/acs-commons/jcr-compare.html"
+      - "{{BaseURL}}/etc/acs-commons/workflow-remover.html"
+      - "{{BaseURL}}/etc/acs-commons/version-compare.html"
+      - "{{BaseURL}}/etc/acs-commons/oak-index-manager.html"
+
+    stop-at-first-match: true
+    matchers:
+      - type: word
+        part: body
+        words:
+          - '<title>Version Compare | ACS AEM Commons</title>'
+          - '<title>Oak Index Manager | ACS AEM Commons</title>'
+          - '<title>JCR Compare | ACS AEM Commons</title>'
+          - '<title>Workflow Remover | ACS AEM Commons</title>'
+        condition: or